mistral-vibe

Fixed

• Allow /teleport with Vibe and workspace API keys, including free accounts, without an internal feature gate.
• Explain which API keys to use when teleport rejects a Codestral key.
• Warn when managed configuration contains removed Vibe Code settings.
• On Windows, opening a session that is already open in another process reports 'Session is already open' instead of a raw permission error.
• On Windows, idle-session cleanup no longer mistakes a session held by another process for an idle one.
• Automatic project context no longer runs repository-configured Git clean or process filters.

Added

• Subagent conversation history is readable through the owning parent session
• Configurable live subagent status and read-only transcript switching from the interactive prompt
• --experimental-harness sessions can track todos, shown as a pinned line under the input and in full on /todo, and keep a per-session scratchpad whose notes are re-stated to the agent after the conversation is summarised.
• Turn an installed skill on or off from the /skills browser without removing it.
• Skill authors can mark skills as explicit-only, keeping slash invocation available while preventing model-initiated loading.
• vibe mcp add --allow-insecure-http and /mcp add --allow-insecure-http opt into plaintext http:// MCP servers on non-localhost hosts, such as a server on the LAN.
• Tool telemetry events now carry approval_source (config/smart/user/bypass/never) to distinguish how a tool call was authorized.
• Press r in the MCP servers & connectors panel to refresh the list on demand.
• Connectors view now links to Studio to add more connectors, pre-scoped to your org and workspace.
• Local app-server sessions now persist and expose their latest accepted user interaction timestamp for downstream session resources.
• Unified Harness app-server sessions can now be pinned, and remember it across restarts.
• Scheduled loops (/loop) are now available in the Vibe VS Code extension with a panel UI for creating, listing, editing, and canceling recurring prompts.
• Vulnerability disclosure guidance and private reporting instructions in SECURITY.md.
• /teleport now works under --experimental-harness

Changed

• The Unified Harness is no longer labeled "experimental"; --legacy-harness is the documented escape hatch back to the legacy Python harness.
• Sessions with OAuth MCP servers configured start faster: fewer and overlapping keychain reads.
• Approving a shell command with a variable expansion now covers the next call that differs only in the expansion.
• Switched the audio engine to miniaudio to improve stability and performance of voice recording and playback
• Connectors are listed and titled by their display name, falling back to the connector name.
• Removed the local Cargo build job cap that limited editable builds to 2 jobs, restoring full parallelism for local harness builds.
• Admin-managed config now enforces the individual keys it sets inside session_logging, project_context and experiments, rather than the whole group. Keys an admin does not set are taken from the user's own config instead of being reset to defaults.
• A model change requested while a turn is running is now accepted and applied at the next turn boundary, instead of being rejected.
• The Vibe CLI now sends a dedicated MistralAI-VibeCLI/<version> User-Agent header on MCP HTTP requests, letting the connectors gateway distinguish Vibe CLI tool calls from other MCP clients.

Fixed

• Images attached to text-only models now fall back to file links instead of failing the turn.
• Worktree sessions now tell the agent about the worktree working directory instead of the original checkout.
• Subagents no longer prompt for tool permission when the parent session is in auto-approve mode under the Unified Harness
• Workspace trust decisions over ACP now require a session and can only target its working directory.
• The experimental unified harness can now record the IDE's workspace trust decision.
• Keep skills with invalid invocation policy metadata explicit-only instead of exposing them to the model.
• Creating or cleaning up a worktree no longer runs the repository's own git hooks (such as post-checkout) or its fsmonitor command.
• Show retrying status during transient provider failures.
• Cancelling a turn no longer hangs when the interrupt wedges server-side, and an interrupt that is taking unusually long now warns with the force-quit hint instead of leaving you staring at a silent "Interrupting" spinner.
• Message sending after resuming pre-existing sessions that use connectors
• Attaching an image from outside the workspace (e.g. ~/Downloads) in a fresh session no longer fails with 'Image file is outside the workspace or session attachments'.
• Existing session logs are restricted to owner-only permissions when Vibe starts.
• Vibe's home directory and the logs inside it are now accessible only to the current user.
• Tool telemetry events now carry the actual approval decision (execute/skip) and approval type (always/never/ask) instead of always None.
• MCP and connector tool calls now respect the permission system: they honor each tool's configured permission, ask before running by default, and remember your approval for later calls.
• The enabled_tools and disabled_tools config globs now apply to MCP tools, not just connector tools.
• session_logging.enabled = false is honoured again on the Unified Harness: the conversation and its attachments no longer land in the session save directory, the session log summary reports that logging is off, and --continue/--resume are refused with the same message the legacy backend gives.
• Hooks now run inside subagents on the experimental harness, instead of being silently skipped.
• pre_tool and post_tool hooks now run for the skill tool, which previously took no hooks at all.
• Hook commands using pipes, &&, redirects, globs or $VAR now run through the shell.
• A hook's match now matches the tool the model actually calls, including edit and MCP tools.
• Unified Harness now injects the current git branch, status, and recent commits into the system instructions, matching the legacy backend
• Shell approvals no longer widen to cover a different program, subcommand, custom shell, or environment.
• Shell approvals no longer cover side-effecting options that the command's guardrails gate.
• Approving a guardrailed command whose argument the shell could not read no longer approves the same command with a different one.
• A shell call that can only be approved as written -- a redirect, a heredoc, a command the shell could not read -- is no longer covered by a wider approval for the same program.
• A permanent approval a tool's allowlist cannot express is kept to the session instead of written there, and now says which scopes it kept.
• Saving a setting while another part of Vibe reads the same config file no longer fails the request
• Starting a turn after an enqueued first message no longer fails while a worktree is being prepared.
• Agent and experiment updates no longer conflict with a worktree setup turn the UI already shows as running.
• Stopping a worktree setup turn now runs the next queued message.
• A dropped first-turn response no longer blocks later turns while a worktree is being prepared.
• A dropped stop response no longer leaves a worktree setup turn stuck.
• Creating a loop via /loop no longer fails with an opaque "Internal error"; app-server errors are now surfaced with their actual message.
• /mcp login now recovers when a stored OAuth token refresh fails transiently (e.g. the server returns 5xx); it discards the stuck credentials and retries a fresh authorization instead of failing every retry.
• Shell commands using line continuations now require approval.
• sort --files0-from now requires approval before reading listed files.
• Teleport no longer runs repository-configured external diff or text conversion helpers when preparing diffs.
• Teleport no longer runs repository-configured file-monitor hooks when preparing diffs.
• WebFetch now requires separate approval before following redirects to another origin.
• Vibe no longer runs a project-local Git executable during automatic repository inspection.
• Config layers now merge key by key, so setting one nested value through an environment variable or a project file no longer discards the rest of that group.
• Reopening a session now restores the model that was picked last, not the one the last turn started with.
• Changing the model in the CLI no longer stops the session's live display.
• Smart approve now asks you to confirm a risky action you requested, instead of blocking it repeatedly and giving up.
• Commands that discard output, such as ls 2>&1 or make >/dev/null, no longer ask for approval. Redirections that write to a file still do.
• Smart approve no longer asks you to confirm deleting a file the agent created earlier in the same session.
• Smart approve no longer prompts when a tool only reads .vibe/ or .git/ configuration; it still asks before writing one.
• Smart approve no longer overrides your permission rules: a command your rules had already gated is no longer auto-approved.
• Smart approve now reclassifies each risky call instead of reusing an earlier decision, so revising your instructions mid-session takes effect immediately.
• Keep a subagent's initial instruction visible after long transcripts
• Crash when the subagent list updates while a row is highlighted
• Escape now returns from a subagent transcript to the main conversation
• Quit confirmation no longer leaks after leaving a subagent transcript
• Clearing or resuming no longer races subagent transcript refreshes
• Resumed sessions and tool approvals no longer stall when notifications arrive
• Providers configured without an API key environment variable — local or self-hosted model servers — run again on the Unified Harness instead of failing every turn with a missing MISTRAL_API_KEY error.
• A provider error on the Unified Harness shows the provider's own explanation again, such as "model is overloaded" or "context length exceeded", instead of only the HTTP status line and the request URL.
• Queueing a message on a Unified session no longer risks killing the app server when the queue change arrives on a session state update.
• Opening a session and loading the session list are much faster on machines with many linked checkouts: reads no longer resolve plugins, MCP servers and connectors they never use, and Desktop asks for a project's sessions in one request instead of one per checkout.

Fixed

• Connector discovery excludes raw HTTP connectors that do not support MCP tools.
• A single invalid connector no longer prevents the rest of your connectors from loading; an individual tool with an oversized schema is dropped on its own, and accounts over the connector cap keep a bounded catalog instead of loading none.
• Automatic session titles use the active model on custom Mistral endpoints.
• Smart-approve now appears in the Vibe Desktop mode picker when enabled via its rollout, and a background refresh no longer drops it.
• ACP clients (Zed/JetBrains) always list the active mode, so a session can never get stuck on a mode missing from its own list.
• Smart-approve now escalates to a confirmation prompt when a risky action is requested again, instead of only blocking it, and shows the reason it is asking.
• Auto-approved calls no longer read as warnings: the reason smart-approve let a call run is shown as a note rather than a warning.
• @ file mentions now resolve against every workspace root, including --add-dir ones.
• A @ mention outside the workspace no longer rejects the whole message; it stays plain text and the read tool can still ask for it.
• --add-dir no longer drops the working directory from the file tools' workspace roots.
• Shell permission checks now require approval for risky syntax and command options that could bypass workspace and denylist controls (CVE-2026-87984, CVE-2026-87985, CVE-2026-87986, CVE-2026-87987, and residual CVE-2026-87988 variants).

Added

• New /branch command forks the current conversation into a new resumable session, leaving the current session unchanged. Resume the copy in another terminal with vibe --resume <id>.

Changed

• Bump the local harness runtime to v0.4.5.
• Make @ file mentions use Git-aware discovery and accept standalone pasted files and folders.

Fixed

• Retained chats remain readable and restore their worktrees when work resumes.
• New session logs are no longer readable by other users on POSIX systems.
• AGENTS.md instructions now load into the system prompt under the experimental unified harness.

Added

• VS Code extension: debug submenu with log level picker, open log file, and a togglable session status panel showing agent statistics (steps, tokens, tokens/sec, context, cost)

Changed

• Open the session picker faster by building the merged session listing once per cursor walk instead of on every page.
• Renamed SessionBackendKind literals from "python"/"rust" to "legacy"/"unified" to match backend identity naming.

Fixed

• An "always" permission grant that fails to reach ~/.vibe now warns instead of passing silently: ConfigOrchestrator.set_field returns its errors rather than raising, so an ignored failure looked exactly like a successful write and the next session asked again with nothing to explain why.
• Steered prompts now preserve their host-provided display content in app-server session history.
• Preserve the selected permission mode when a session starts in a worktree.
• Managed worktree creation, attachment, and retention cleanup are serialized across processes, and stale reservations are recovered safely.
• Stop dropping a session from the picker when it is touched while paging through the list.

[2.25.1] - 2026-09-09

Added

• Desktop keeps 15 recent managed Code worktrees by default, configurable in Local Coding settings; cleanup skips active, dirty, untracked, or unpushed worktrees.
• Background process tools (process.start, process.stop, process.output, process.list, process.write) now show the command or process ID in the call header and a typed result widget instead of raw JSON.
• Tool call groups now fold into a single compact summary line by default. Click to expand the full list. Ctrl+O toggles all groups and result bodies. The summary shows present-tense labels while running (e.g. "Running commands") and past-tense when done (e.g. "Ran commands"). File edits and writes are included in the fold.
• Show a loading spinner in the conversation while /reload is in progress
• A risky call is returned to the model to self-correct rather than interrupting the human, escalating to an approval prompt only after a streak; no failure path auto-approves
• Experimental experimental_enable_tab_status config option: shows >> (running) and ? (waiting) indicators in the terminal tab title.
• New built-in worktree plugin with a skill for creating, reusing, and cleaning up git worktrees under $VIBE_HOME/worktrees.

Changed

• The invalid API key error now names where the key came from (env var MISTRAL_API_KEY, the keyring), so a shell-exported key shadowing the one saved at setup is visible.
• Optimized resource usage when running the full test suite.
• The vibe and skill-creator skills now reach a session as skills of the shipped vibe plugin, so they are offered once, as /vibe:vibe and /vibe:skill-creator.
• Bump harness to v0.4.3
• Vibe Desktop can create local projects from any existing folder.
• Background LLM session titles are now off by default. Set session_logging.generate_titles = true to re-enable them.
• Vibe CLI shows the output of a ! command directly in the timeline: it is neither folded behind its own toggle nor gathered into the summary line that folds the agent's tool calls. Shell calls the model makes still fold, as every other tool result does.
• The /plugins detail view now leads with Author and Version, then the description, then Location (renamed from "Installed from"), Scope, Format, and Pinned.
• The /resume session picker now shows an animated loading indicator while saved sessions are discovered and waits briefly before loading a highlighted session preview, keeping rapid keyboard navigation responsive.
• A session that asks for a worktree now starts in the repository and moves into the worktree once git worktree add lands, so the session exists from the moment the prompt is sent instead of after the checkout. Only its first turn waits.

Fixed

• Worktree sessions retain access to attached images and files.
• Pinning or removing a shared skill now republishes this repository's claims, so another repository's cleanup no longer deletes a skill you just added.
• Removed unauthenticated debugpy listener on localhost:5678 that was activated by DEBUG_MODE=true under vibe-acp
• A rejected API key no longer offers /retry, which could only fail again with the same key.
• Path autocomplete now prioritizes matches beneath an explicitly typed directory prefix in large repositories
• GrowthBook rollouts set only via a feature's default value now take effect (previously ignored)
• GrowthBook boolean feature flags now take effect, not just string on/off values
• Cached experiment variants are no longer dropped to defaults on cold start or resume
• Stop the CLI from dumping a traceback on exit when the app-server connection drops during shutdown (a failed reconnect/resume no longer crashes the event listener).
• Built-in plugins are no longer listed under "Not loaded" in /plugins with "Plugin namespace 'vibe' is reserved". Only a built-in may claim the reserved vibe namespace, but the re-resolve a session's plugin bind performs was re-reading every checkout at project scope, so the shipped vibe plugin was dropped from every session.
• Tool call group icon now reflects the status of the last call in the group instead of the worst (any failure no longer overrides a later success)
• Individual failed tool call indicators stay grey (muted) when a later call in the same group succeeds, instead of escalating to red
• Tool group and individual tool call indicators now show a blinking square while running, then a colored dropdown triangle when settled
• App-server validation errors now name the offending field and reason instead of only "Invalid request parameters".
• The auto-generated session title now waits for the first turn to complete and ignores the assistant's process preamble, so it names the actual task (e.g. the real subject of a linked issue) rather than an opening line like "I'll explore the codebase"
• Session titles now generate and refresh while a turn is still running — including long, tool-heavy turns that emit few assistant messages — instead of only when the turn ends or is interrupted
• A ! command that exits non-zero (or is interrupted) now shows what it printed. Only the exit status was reported before, which hid the stderr explaining it.
• User-scope plugins (~/.vibe/plugins/) were shown as project scope in /plugins because the bind-time resolve collapsed all staged checkouts to project scope. Scope is now preserved from the original discovery.
• Smart approve now runs its classifier on the fast Mistral model regardless of the session's active model, including when you switch into the mode mid-turn; a session on another model (e.g. a non-Mistral provider) sent the classify call to the wrong endpoint, so every gated tool call came back unverifiable and prompted instead of auto-approving
• The smart-approve pre-check no longer fast-approves content-dumping git commands (git diff/show/blame, git log -p, git status -v); they defer to the classifier so a secret shown in a diff is not auto-read
• The smart-approve pre-check no longer fast-approves a secret path hidden behind a cd prefix (e.g. cd ~/.ssh && ls); the secret scan now reads the whole command, not the part after the cd
• The classifier now runs the fast model with deterministic decoding (temperature 0, thinking off) regardless of the session, so a thinking session no longer sends a thinking request to the small model and escalates every gated call
• A subagent's classification event under smart approve is now forwarded to telemetry like a top-level one, instead of being applied as a subagent state update — which had dropped the subagent's events from the main-agent stream
• Smart approve no longer classifies ui.ask_user_question; asking the user a clarifying question is the escalation channel itself, so it always runs instead of paying a classifier round-trip, being deny-and-continued, or escalating to an approval dialog to ask
• Starting with --smart-approve now keeps the mode in the Shift+Tab cycle for the whole session; it was selected at launch but dropped out of the cycle after switching to another mode, so you could not switch back to it
• Switching agent mode mid-turn now re-gates MCP/connector tools too: leaving smart approve stopped asking for built-in tools but kept classifying every connector call because the mid-turn config graft dropped provided_tool_mode
• "Approve for session" on an MCP/connector tool under smart approve now covers the whole tool instead of the exact arguments, so calling the same tool with different arguments no longer re-prompts (built-in tools keep their per-call resolver scope)
• Resuming a session created by a newer version of Vibe now shows a clear message to restart with --check-upgrade and update, instead of an internal store-format validation error.
• Hook commands run without a shell to prevent injection via hooks.toml

Added

• /skills browser for session skills, with search and filter; shared skills sync on session start. Experimental, off by default.
• Browser SSO completes behind split-horizon reverse proxies; opt-in browser_auth_allow_origin_rewrite rewrites sign-in/poll URLs onto configured origins
• Discovery of Mistral's built-in web-search connector
• Plugin-declared MCP servers in /mcp, tagged with their plugin and authenticatable via /mcp login; a pending login is announced at session start
• Connectors (Notion, Linear, Slack, GitHub, Gmail, Google Calendar, Drive) in ACP
• ACP elicitation-form clients can answer ask_user_question and exit_plan_mode
• Session-scoped model pinning for resumed conversations
• vibe update to check for and install a newer release

Changed

• Connector discovery skips unsupported protocols
• agents/list no longer requires a session id
• Prompt queueing runs through the app server with select, edit, remove, pause, and resume controls
• /skills browser groups by scope, fits rows to width, and pages long lists
• vibe --yolo selects the auto-approve profile (cyclable with Shift+Tab; blockable via disabled_agents)
• A plugin MCP server whose name collides with an [[mcp_servers]] entry is dropped with a warning instead of inheriting the configured credential
• /config saves to user config by default; Tab cycles user / session / (trusted) project target
• Vibe CLI sends queued prompts as a single turn; Desktop keeps turn-by-turn
• /mcp title marks an in-flight background refresh

Fixed

• Pruning cached skills preserves versions pinned by other repos
• Approved file operations act on the cleared path, preventing symlink redirection outside the project; approved writes outside the project execute
• Onboarding crash on a malformed browser_auth_api_base_url port
• Split-horizon account and re-signin reach the connector origin and adopt tenant domains from /whoami
• Multi-line tool descriptions (remote MCP, connector, plugin) no longer break /mcp layout; rows render the first line only, [source] prefix stripped
• Mode indicator reflects the effective tool-approval bypass (--yolo, --auto-approve, bypass_tool_permissions)
• Builtin vibe skill no longer recommends the removed /terminal-setup and now documents /copy, /paste-image, /remote-project
• Context gauge drops the discarded conversation immediately after /clear and /compact
• /config shows and edits the active model's effective auto-compaction threshold, preserving org-enforced global locks
• Session event stream no longer crashes on a JSON-Patch move from a field relocation
• /mcp login no longer probes with a bare GET (405 before credentials); for a plugin server it sends the plugin's declared headers and uses its own URL, not a same-named [[mcp_servers]] entry from another session
• Toggling an MCP row the app server refuses to change shows a notice instead of ending the session
• /mcp add under a plugin-owned name takes the name immediately for the configured entry
• /mcp refresh reconnects plugin servers, not just configured ones
• Same-named plugin MCP servers each get their own /mcp row with their own status and tools
• Adding then removing an [[mcp_servers]] entry under a plugin-owned name no longer strands the plugin's server
• A second session no longer drops the first's plugin servers or [[mcp_servers]] entries; each session's configured servers are its own
• A server whose name another session shares no longer gets that session's credential deleted on identity mismatch
• Context-window indicator updates on model switch without a restart
• Failed queue merge no longer leaves a ghost prompt; rewind targets the merged turn's real history entry and survives removing the first queued prompt
• Connectors/MCP panel auto-sizes to content instead of a fixed 50vh
• /mcp no longer paints a failing-discovery source or unlinked connector as enabled before it comes up
• Crash on closing the app while a turn is streaming
• Loading spinner keeps its "Interrupting" label in the pre-surface gap
• Closing the resume picker mid-load no longer crashes with NoMatches
• Invalid active model falls back to the current default; the banner model refreshes after clearing a session
• Account refresh no longer overwrites third-party provider settings on a concurrent model change
• Rewind into a new session and rewind-in-place while resyncing no longer redraw stale turns
• /mcp opens from cache and waits 60s before refreshing; HTTP setup runs outside the UI loop
• System trust store respected during browser sign-in
• A message sent while idle or right after interrupting no longer flashes as queued and shows the loading indicator immediately
• Escape-to-interrupt updates the status immediately; Escape+Enter to restart a queued turn no longer drops the Enter; Escape just as a turn finishes no longer stalls the next message

Removed

• Devstral Small (devstral-small-latest) from the default models list; stale sparse config overrides migrated automatically

Added

• Fuzzy search in the MCP servers and connectors browser

Changed

• Faster startup through additional lazy imports and deferred schema builds

Fixed

• Trust prompt is skipped when --worktree or --trust already grants access
• Links are normalized before opening to prevent broken clicks
• Themes apply correctly at startup
• Retried Mistral responses are released back into the connection pool

Added

• Slash commands and setting pickers can be used while the agent or a command is running
• The process is named "Vibe CLI" and the bottom bar shows its PID

Changed

• Models are shown by display name instead of the raw config alias
• Python dependencies updated to clear known security advisories

Fixed

• Connector bootstrap failures are surfaced instead of reporting no connectors

Added

• In-app session picker with live preview
• /log-level command for runtime log-level control
• /retry is exposed to ACP clients
• Created worktrees are shown in the transcript
• Worktrees are cleaned up when their local session is deleted

Changed

• Faster startup: the TUI renders before session initialization and imports are deferred
• Faster session resume
• Edit and read tool headers show paths relative to the current directory
• Admin config fetch retries with exponential backoff
• Custom tools are flagged as deprecated

Fixed

• New worktrees branch from the remote default instead of local HEAD
• Configured temperature is respected for reasoning models
• Thinking setting updates correctly for routed models
• Path picker stays open on / and supports ../ traversal
• Escape sequences in command output no longer flood the input box
• Live tool-permission bypass propagates to child agent loops
• Managed shell output is no longer sent to the LLM twice
• Adding a tool to the allowlist keeps the default allowlist
• OpenTelemetry traces are sent to the correct endpoint

Added

• Inline ghost-text completion for mid-prompt skills
• /clear and /new accept an optional first prompt and show the resume id
• Compacted conversation history is preserved
• OpenTelemetry tracing configuration is now available

Changed

• Default agent renamed to ask and defaults to accept-edits
• Auto worktrees are named with a model
• Faster resume by deferring sub-agent instantiation

Fixed

• Surface MCP server startup failures to the user
• Text selection is now visible in the chat input
• Provider reasoning is replayed verbatim
• Detect and retry incomplete LLM streams
• Surface voice transcription errors instead of swallowing them
• Proactively refresh expired MCP OAuth tokens
• Theme switching is now responsive
• Crash on undo of a large multiline insert in the chat input
• Config modal headers stay visible on wrap, with a tighter layout
• Trusting the cwd no longer untrusts <cwd>/.vibe
• Home directory is no longer treated as a project root
• Explain the fallback when the configured default model is invalid
• Scope sensitive-file read grants and stop chat bypass
• Git Bash paths no longer create bogus C:\c\... directories on Windows
• Use POSIX separators when shortening home paths in display
• /clear resume hint gated on session persistability

[2.24.0] - 2026-08-05

Added

• Admin config layer for shared/enforced config that applies over user config
• "Default" (unpinned) model option in /model and /config to track the recommended model without pinning a specific alias
• Server-side default model routing via experiment, never overriding explicit pins
• LLM retries surfaced in ACP/VS Code conversations via _session/retrying notification
• Explore subagent can load skills
• Local sessions start in the selected worktree
• User and project config layers compose; trusted project config overlays user config instead of replacing it
• Startup duration telemetry (vibe.startup)

Changed

• Experiment variants routed through the config schema; TOML/env/overrides now take precedence over GrowthBook assignments
• Autocopy: keyboard copy shortcuts give feedback, double/triple-click drag improved, and autocopy_to_clipboard documented

Fixed

• Drag-and-drop of files into the terminal when unfocused (iTerm2, Ghostty)
• Subagent session handoff after compaction
• Stale devstral-small thinking setting migrated to off
• Noisy non-Vibe events dropped from Sentry
• ACP returns max_turn_requests stop reason instead of erroring on turn limit
• /resume listing speed no longer scales with total session count (persistent index)

Added

• /retry command to retry an interrupted response
• /rewind now lets you choose between forking and rewinding in place
• LLM retries surfaced in the UI and logs
• Read the config catalogue without an attached session

Changed

• /status shows provider prompt-cache usage and discounts cached tokens from the session cost
• Native copy hint on the clipboard notice

Fixed

• Refused config change no longer wipes the picker
• Git fsmonitor hook disabled in project context
• Signed reasoning blocks preserved
• Tab hint colored in config edit modal
• UPX disabled in the PyInstaller specs
• List formatting preserved when copying a selection from the TUI
• Duplicate approval widget prevented when callbacks overlap
• ACP usage update sent on session resume, fork, and new
• Context token display updated on session resume
• More frequent context window updates in ACP

Removed

• Unreachable chat mode

Added

• Skill-creator built-in skill: a guided flow to author, update, and delete your own skills
• Browser sign-in can target a custom login domain for self-hosted or private-gateway deployments
• Session stats now track provider cache-hit (cached) tokens

Changed

• Redesigned /config as a searchable, full-screen settings browser with typed edit modals and per-layer origin display
• App-server protocol extended and packaged as a standalone vibe-app-server binary for desktop integration

Fixed

• Cached-token counts now reported in session stats instead of always zero
• Zed ACP packaging preserves symlinks by shipping .tar.gz archives
• grep result chips open the correct file and no longer leak absolute host paths into context (ACP)
• ACP /rewind truncates in place instead of forking
• Extra fields in the whoami response no longer rejected
• ACP session history sorted by recency
• Blank permission prompt and duplicated user message in the ACP/VS Code webview
• WhoAmI result again tolerates extra fields

Fixed

• Crash when @-mentioning a file, which aborted the turn

Added

• [A/B testing] OS-native managed shell tools
• vibe mcp add and vibe mcp remove commands to add and remove remote MCP servers without editing TOML
• Auto theme that follows terminal/OS appearance
• ACP project links surface for desktop integration
• Dense, grouped tool-call rendering in the TUI

Changed

• Trust dialog now defaults to "Trust folder" and is simplified
• Tool descriptions compressed to reduce context bloat
• Smoother, faster scrolling in long conversations
• Fixed unnecessary textual relayout computation on constant-size animation frames, removing lag spikes
• Major internal refactor introducing a JSON-RPC 2.0 app server as the single runtime owner between delivery surfaces (TUI, -p, ACP) and the core engine, replacing direct AgentLoop/callback coupling with a typed, projected protocol

Fixed

• Option+Left/Right word navigation in the chat input
• Unsigned thinking blocks dropped on backend replay
• SGR mouse protocol renegotiated when the emulator sends x10 bytes
• Crash on /resume delete confirmation
• Empty mapping treated as absent in CONCAT/UNION config merge
• LC_CTYPE used instead of LC_ALL in the bash tool environment
• Chunk text emitted before its tool call in the streaming loop
• Text selection guarded against detached widgets
• OSError on over-long @-mention autocompletion candidates
• MCP registry created when the first server is added via /mcp add
• CLI conversation ID preserved after teleport
• Data-retention link accessible to non-admins

Added

• /new command as an alias for /clear
• ACP review support: approve or revert agent changes from ACP clients, with live refresh

Changed

• Full migration to ConfigOrchestrator for configuration handling
• Defaults now filled at merge time via DefaultConfigLayer; config.toml stores only user-set values

Fixed

• read_file no longer prompts for approval on plan files in plan mode
• Benign Sentry noise suppressed (EIO, clean exits, broken pipe, transcription 401)
• Exception on unsafe configuration read

Removed

• Teleport context summary flag

Added

• Registry skills content store and manifest for skill discovery
• Config schema exposed through ACP
• Checkpointer engine state model, owner union, and pending hunks

Changed

• [Breaking — hooks] Hooks graduated from experimental; hooks.toml is now stable. Every hook type is renamed: post_agent_turn → post_agent, before_tool → pre_tool, after_tool → post_tool (the hook_event_name payload field is renamed to match). Update existing hooks.toml files accordingly.
• @file mentions now inject as read_file tool calls
• Telemetry routed through client-side redaction
• Models field migration from list to dict
• VibeConfig cutover prep with persisted-config read and orchestrator SSL parity
• Reduced feedback survey frequency for users who already responded

Fixed

• Duplicate model aliases deduplicated instead of failing config load
• UTF-8 BOM stripped in decode_safe
• UTF-8 BOM stripped from SKILL.md before parsing frontmatter
• MCP server connection errors now surface in the TUI
• MCP discovery failures now surface in ACP sessions
• stdin content no longer discarded when /dev/tty is unavailable
• GitPython import deferred off the ACP startup path
• @file mention suggestions stretched to full width
• Blank line removed between approval options
• Connector tool permission content scrolls instead of cropping
• ConfigOrchestrator gained an explicit copy() for forking

Removed

• enable_experimental_hooks config flag (and VIBE_ENABLE_EXPERIMENTAL_HOOKS env var); hooks now load unconditionally when declared

Added

• Warning when the Narrator is enabled without working audio output

Changed

• Windows command prompt is now shell-aware
• Hardened bash tool permissions and cross-platform shell handling
• Rewind now triggers on a double Esc when the input is empty, with improved keybindings
• Teleports now include summarized context
• Renamed user plan labels (Teams → Team, Education → Student)
• ask_user_question selection now works via mouse and supports free-text entry

Fixed

• More robust SSE streaming in the generic backend
• NoneType crash when stopping voice recording during a drain-timeout race
• Windows ProactorEventLoop teardown tracebacks on /exit
• MCP OAuth tokens are no longer dropped on transient refresh errors

Added

• Experimental managed bash tool for running and tracking shell sessions
• --disabled-tools CLI flag to turn off specific tools for a run
• Per-tool description overrides via <tools-dir>/prompts/<name>.md
• Setting to clear context when a plan is accepted
• Discovered AGENTS.md files are now surfaced during read_file tool calls

Changed

• Reactive compaction with a dedicated summary fallback and stricter summaries
• User-invoked skills now load as a synthetic tool call
• Tool config now merges via deep merge
• MCP panel now refreshes silently in the background
• Debounced the agent-switch spinner
• Neutral color for keyboard shortcut hints
• Falls back to the first available model when the active model is unknown
• HTTP requests now honor CIDR notation in NO_PROXY
• History now loads lazily on resume, and session writes are off the event loop
• Faster startup by deferring heavy imports
• PII and identifying paths are now scrubbed from Sentry reports

Fixed

• Rewind now happens in place instead of forking the session
• No longer includes pydantic URLs in error messages
• Text can now be scrolled while selecting at the chat bottom
• Click text selection is now scoped to word and paragraph
• DuplicateIds crash when the recording UI starts twice
• Git subprocess output is now decoded as UTF-8
• Corrected the truncated indicator position and removed a duplicate fetch link

Added

• --worktree NAME option to create or reuse a git worktree and run inside it
• Rewind support over ACP for both the agent and the host

Changed

• Teleport URL in the CLI is now clickable
• Raised the Leanstral context limit
• Sentry auto integrations are now disabled

Fixed

• Path prompt work is now offloaded from the UI thread
• StopIteration crash in QuestionApp when submitting an empty multi-select
• User message index now accounts for the deferred system prompt
• No longer reports benign Sentry noise (KeyboardInterrupt and destroyed pending tasks)

Changed

• Whole-line content now shown in the edit diff
• Declined or skipped tool calls now render as a muted square
• Auto-approve now works in lean mode

Fixed

• Session resume with --continue now matches the resolved working directory
• Long tool call titles now wrap instead of being cropped
• Duplicate mcp_servers names in config are now rejected
• MarkupError crash when a tool error contained square brackets
• Teleport now uses the matched GitHub remote
• Raw compaction user messages are now preserved
• ACP now honors default_agent on new and resumed sessions
• Ambiguous teleport session creates are now retried

Added

• j/k navigation in selectable lists across the TUI (questions, theme picker, rewind, voice, MCP panels)
• ask_confirmation_on_exit config option to prompt before quitting
• Project-level .vibe/config.toml now persists config option changes

Changed

• Consistent styling and casing for keyboard shortcut hints across the TUI
• ask_user_question now supports more than 4 options and questions

Fixed

• No longer prompts to log in for disabled MCP servers
• Teleport diff no longer mutates the real git index

Added

• /mcp add slash command for adding OAuth MCP servers
• Petit chat animation idle pauses

Changed

• Bare exit synonyms (exit, quit, :q, :quit) now treated as slash commands instead of prompts

Fixed

• MCP OAuth login crash when keyring backend is un-loadable

Added

• Clickable URLs in web fetch and web search tool output
• Context window usage display in tokens at the bottom of the TUI
• Clipboard image paste support in the TUI (macOS)
• Max generated tokens set_config_option in ACP

Changed

• MCP OAuth authentication UX improvements in /mcp panel
• Diff gutter and body split into separate widgets
• Faster UI startup with lazy heavy imports
• Improved connector performance with bootstrap caching

Fixed

• macOS keychain access for Vibe credentials
• Standalone denylist incorrectly blocking commands with heredocs
• Copy selected text from prompt input and text areas
• Repeated keyring requests in Vibe Code
• Brew upgrade now always runs even when uv upgrade succeeds
• Terminal kill/release bounding for ACP to prevent hangs

Changed

• Commands in /help are now listed alphabetically in both the CLI and ACP
• /teleport is now always available and shows an explicit error when its prerequisites aren't met, instead of being hidden

Added

• /mcp login, /mcp logout, and /mcp status commands to authenticate OAuth-backed MCP servers from the TUI
• vibe --check-upgrade to force an immediate update check and exit
• --yolo as an alias for --auto-approve
• ACP now accepts inline image content blocks

Changed

• API keys are now stored in the OS keyring instead of plain text
• Edit diff view now shows all replaced occurrences instead of just the first
• Completion popup now uses a two-column layout
• Chat messages now have right padding so text no longer collapses into the scrollbar
• Faster CLI shutdown by deferring resource cleanup on exit

Fixed

• Skill autocomplete popup now dismisses after Tab completion
• Stdio MCP connections now persist across tool calls
• Retryable 5xx responses from the Mistral backend are now retried instead of failing

Added

• ACP workspace trust gated behind the workspace-trust client capability

Changed

• /resume now opens much faster
• Startup update-failure message is now gentler and no longer alarms when an update can't be applied

Added

• Fuzzy search in slash command autocomplete
• Syntax-highlighted, line-numbered, theme-aware diffs for file edits

Changed

• /resume now scopes the session picker to the current folder
• Clipboard copy confirmations now appear inline instead of stacking toast notifications
• ACP teleports now use the client title as the Vibe Code project name when no explicit project name is configured

Fixed

• ACP max-output-token responses now stop gracefully with max_tokens instead of surfacing internal errors
• Context-too-long responses wrapped as HTTP 422 are now classified correctly
• SSE streams are parsed on CR/LF boundaries only, avoiding crashes on valid Unicode line separators in JSON strings
• CLI banner now shows the Free plan correctly
• Mistral backend no longer sends reasoning content when model thinking is off

Added

• [Experimental] before_tool and after_tool hooks: shell scripts declared in hooks.toml that fire around every tool call; hooks can deny the call, rewrite tool inputs, or append context to the output — enable with enable_experimental_hooks = true
• Message queue: messages typed while the agent or a !bash command is running are queued and shown above the input; Esc pauses the queue, Ctrl+C drops the last queued message (LIFO), Enter flushes the queue when paused
• Tool result output is now collapsed by default to keep responses scannable
• Common read-only shell commands (ls, cat, pwd, etc.) are allowed without approval by default
• Session deletion available directly from the resume picker
• [mcp_servers.auth] block in config for per-server MCP authentication
• Collapsed web tool output now shows the URL and search query at a glance
• max_turns support exposed over ACP via set_config_option

Changed

• Compaction now re-injects prior user messages so the agent retains the original task goals across context resets
• [Breaking — experimental hooks] post_agent_turn retries no longer use exit code 2; hooks must now exit 0 and return {"decision": "deny", "reason": "..."} on stdout to trigger a retry — exit code 2 is treated as a failure
• Model refusal stop reason is now surfaced to the user instead of stopping silently

Fixed

• CLI UI no longer goes blank during app switches
• User messages are preserved correctly across repeated compactions
• Non-UTF-8 input is handled gracefully across all CLI surfaces
• --resume now shows history when launched from a dangerous directory
• Startup no longer crashes in unowned folders or when a git ancestor is unreadable
• Plain-string answers from web_search are handled without crashing
• NaN SGR mouse reports no longer leak into the chat input

Added

• /teleport slash command exposed over ACP, mirroring the TUI command for IDE integrations
• Startup prompt to install a pending Vibe update before continuing the session

Fixed

• JetBrains IDEs no longer trigger a preemptive auth prompt over ACP and no longer drop terminal arguments
• Initial ACP slash-command advertisement is delayed so Zed registers commands like /help instead of rejecting them
• Built-in tool prompts no longer reference the removed search_replace name and now point to edit

Added

• Image attachments via @-mentions in the TUI for vision-capable models
• Session deletion, exposed over ACP as the session/delete extension method
• Browser sign-in now shows a copyable fallback URL when the browser does not open, so SSH and remote sessions can complete onboarding
• Toast notification when a SKILL.md file fails to parse instead of silently dropping the skill
• Trust prompt now proposes the git repository ancestor as a trust target
• EnvironmentLayer in the layered configuration, populated from VIBE_-prefixed environment variables

Changed

• New tool-call format for read and the file edit tool
• write_file is now create-only and refuses to overwrite existing files
• Bumped agent-client-protocol to 0.10.1

Fixed

• LLM calls now retry on network errors and timeouts (connection, read, write, remote protocol, timeout)
• Approval modal now sizes itself so the bottom of long tool-call payloads stays visible above the options block
• Banner connector count and /mcp panel ordering now reflect which connectors are actually usable and the user's enable/disable choices
• disabled_tools from runtime is merged with the TOML configuration instead of replacing it, and is enforced inside ToolManager.get()
• shift+backspace and shift+delete now work in the chat input
• Crash in the ACP todo plan-update handler when the model's tool call failed validation

Removed

• Recursive search for nested harness files

Added

• enable_system_trust_store config flag to switch the shared SSL context to the OS trust store for corporate TLS / private CA setups

Changed

• MCP HTTP transport now uses Vibe's shared SSL context so it honors SSL_CERT_FILE / SSL_CERT_DIR and the system trust store opt-in
• API key onboarding and plan-upgrade CTAs now link to the new Mistral Vibe Code extensions page
• Compaction summaries are now injected into the conversation instead of replacing it

Fixed

• Crash during initialization
• VS Code extension promo banner now sits at the top of the conversation instead of being pinned above the input

Fixed

• VS Code extension promo link in the CLI banner now points to the renamed mistralai.mistral-vibe-code extension

Added

• Custom compaction prompts via the compaction_prompt_id config setting, resolved from ~/.vibe/prompts/ or .vibe/prompts/
• --max-tokens flag for programmatic mode (-p)
• ACP _auth/status and _auth/signOut extension methods so IDE extensions can show auth state and sign the user out
• Auth source assessment in vibe.setup.auth to classify the active credential source
• VS Code extension promo line in the CLI banner when launched from a VS Code, Cursor, or VS Code Insiders terminal
• OverridesLayer and ProjectConfigLayer for the layered configuration system

Changed

• Programmatic mode (-p) no longer auto-approves tool calls by default
• Browser sign-in is enabled by default for Mistral providers; the enable_experimental_browser_sign_in flag is no longer required (stale entries are silently ignored)
• Compaction quality improved
• Refreshed user message styling and slash/teleport variants
• /teleport to Vibe Code Web now carries the working diff and last commit, matching the legacy teleport
• Reworded /teleport help and completion copy to say "Vibe Code Web"

Removed

• Zed extension publishing job from the release workflow

Added

• Load skills from ~/.agents/skills so they can be shared across agents
• Restore the textual theme selection system with an onboarding theme picker
• Surface unauthenticated connectors in /mcp with needs auth / needs setup labels and start the OAuth flow from inside the CLI
• Current date injected into the system prompt
• minimal system prompt variant for eval and training

Changed

• Refreshed manual API key onboarding screen to match the new onboarding panel layout
• Newly discovered connectors are now disabled by default; existing user choices are preserved

Fixed

• Preserve original line endings in ACP search_replace
• Show MCP/connectors count as enabled/total in the banner
• ACP grep tool displays the search path as a chip and no longer drops the filename

Added

• Pretty session titles that format @mention syntax for human-readable display
• Auto-emit SessionInfoUpdate on the first prompt so IDE session pickers reflect the title immediately
• End-to-end layered config read path with TomlFileLayer, ConfigBuilder, and ConfigOrchestrator

Fixed

• MCP menu no longer shows D/E shortcuts in the detail view when there are no tools to enable or disable
• Parallel bash tool calls in ACP each render their own live terminal instead of racing on shared state

Added

• GrowthBook A/B testing layer with first system prompt experiment
• --add-dir flag to pull additional repository roots into a session
• --no-autofill flag for bump_version.py script
• TTY-keyed --continue scoping to current terminal
• Improved plan mode readability with live-editable plan display (Ctrl+G to edit)
• ACP dispatch user rating telemetry
• enable_connectors config flag to control connector availability
• Connectors migrated to public GA endpoints

Changed

• Combine git subprocess calls in SessionLogger for improved performance by @MichisGitIsKing
• Indent assistant message content to align with other messages
• Deprecate retrying workflow status and expose retry source
• Drop consecutive user-message merging in LLM backends

Fixed

• Share session permissions with subagents
• Bump pydantic-settings to >=2.13.0
• Avoid closing in-use backend on agent reload
• Slash commands broken when automatic IDE context is enabled
• Debounce tool approvals to avoid interrupting user typing
• Preserve newline style in search_replace
• Reset cursor position on up-arrow
• Remove hardcoded API key env var in websearch
• Fix whoami hardcoded url
• Pin dependencies in published wheel

Added

• Syntax-highlighted file diffs for write_file and search_replace in the IDE agent webview
• Spinner and loader for ! (bang) command output
• prepare release script can resume after resolving merge conflicts

Fixed

• Strip wildcard suffix when persisting bash allowlist patterns
• Build a combined SSL context for all outbound HTTPS requests
• Hide non-interactive tools from the LLM in ACP and programmatic mode

Added

• /loop command to run a prompt or slash command on a recurring interval
• default_agent config setting
• Telemetry instrumentation for the teleport command
• Logging environment variables documented in --help

Changed

• enable_telemetry now takes precedence over enable_otel

Fixed

• Non-retryable errors raised by sub-activities now correctly stop the retry when the agent loop runs inside a Temporal activity (deepens the 2.9.4 fix to walk the exception cause chain)
• Compacted session IDs displayed correctly
• Reload the history file before writing so parallel instances don't clobber each other
• read_file flagged as truncated when the limit is reached
• CLI loader left-alignment
• Default scroll sensitivity in the TUI restored
• Loosened the "no git commit" constraint
• Ensure enable_telemetry takes precedence over enable_otel

Added

• /rename command to rename the current session
• feat: vibe.at_mention_inserted telemetry event
• "Always allow" tool permissions persist across sessions
• Eager agent-loop warmup so vibe.ready telemetry fires sooner

Changed

• bash (!command) bang commands run via async subprocess for better latency
• Bumped mistral SDK to 2.4.4
• Bumped cryptography to address upstream CVEs

Fixed

• Preserve non_retryable flag on exceptions raised through _chat / _chat_streaming, so callers driving the agent loop from a Temporal activity can signal "do not retry"
• /clear no longer chains parent_session_id to the previous session
• vibe.new_session telemetry no longer fires when resuming a session

Removed

• Windows ARM build artifacts (no longer published; required to bump cryptography)

Added

Changed

Fixed

• Fix textual version

Removed

Fixed

• Teleport surfaces the latest GitHub connection status while polling

Added

• Connector OAuth authentication flow in /mcp menu
• ConfigPatch operation types for Vibe Code
• extra_headers field to ProviderConfig
• Structured metadata on ACP tool results
• vibe.user_cancelled_action ACP telemetry coverage
• vibe.new_session telemetry event emitted whenever the session is reset

Changed

• Migrated default model to mistral-medium-3.5

Added

• Scratchpad directory for temporary working files shared with subagents
• /copy slash command
• Experimental hooks system with post-agent-turn lifecycle
• OpenAI Responses API adapter
• ACP session fork and session close support
• Thinking level picker in ACP CLI
• --trust session-only flag and fail-fast behavior in -p mode
• Opus 4.7 model support
• ConfigLayer for layered configuration resolution
• ~/.vibe/prompts overrides for builtin prompts
• Enable/disable MCP servers and individual tools from /mcp menu
• Custom compaction instructions via /compact
• vibe.ready telemetry event
• Usage updates sent after every LLM turn for ACP
• Headless section in system prompt to prevent bad model behavior

Changed

• Renamed auto_approve config to bypass_tool_permissions
• Increased feedback bar frequency with cooldown and TOML cache
• Feedback bar only shown when active model is Mistral
• Centralized telemetry metadata construction and wired through entrypoints
• Preserved stable session identity across compact/fork/rewind
• Filtered remote sessions by current user and deduped continue-as-new
• --continue now only looks for sessions of the current working directory
• Batched widget mounts and narrowed CSS selectors for UI performance

Fixed

• Autocomplete popup height calculation for wrapped lines
• Autocomplete popup dismissed on tab completion and escape
• Double Ctrl+C/Ctrl+D required to quit instead of killing session immediately
• Context window overrun now shows a friendly error message
• MallocStackLogging error messages suppressed in CLI input
• index.lock leftover on interrupted deferred init
• Safe find commands allowed by default
• Session ID preserved when resuming sessions through ACP
• Usage updates sent after tool results instead of tool streams in ACP
• KV cache warming via x-affinity in count tokens

Fixed

• Fixed changelog and whats_new

Added

• Builtin skills system with self-awareness skill
• cwd configuration parameter for MCP stdio servers
• /connectors as alias for /mcp and R refresh shortcut in MCP browser
• MergeFieldMetadata and annotated merge strategy helpers for config schemas
• vibe.request_sent telemetry event fired before each LLM API call
• Model alias to tool_call_finished telemetry event

Changed

• Deferred heavy init in subagents and ACP sessions to background thread
• Renamed request_sent telemetry fields and added nb_prompt_chars
• Sorted connectors in /mcp menu by connection state then alphabetically

Fixed

• /debug command no longer throws
• Race condition in banner initialization dropping initial state

Removed

• /terminal-setup command

Added

• MergeStrategy enum and merge logic for configuration
• call_source=vibe_code field in LLM request metadata
• "Other" task type for non-code requests in CLI prompt

Changed

• Parallelized git subprocess calls during startup
• Extracted command registry and refactored skill resolution
• 1M context window and thinking budget max for opus
• Updated default telemetry URL to api.mistral.ai

Fixed

• Markdown fence context loss causing streaming rendering problems
• Proxy chain URLs in api_base parsing

Removed

• Alt+Left / Alt+Right key bindings from chat input

Changed

• Display detected files and LLM risks in trust folder dialog
• Text-to-speech via the Mistral SDK with telemetry tracking
• Deferred MCP and git I/O to background thread for faster CLI startup
• Made telemetry URL configurable
• Bumped Textual to 8.2.1

Fixed

• Encoding detection fallback in read_safe for non-UTF-8 files
• Config saving logic cleanup

Added

• Console View for enhanced debugging and monitoring
• /mcp command to display MCP servers and their status
• Manual command output forwarding to agent context

Changed

• Improved web_fetch content truncation for better readability
• Lazily load heavy dependencies to improve startup time
• Optimized folder parsing at startup using scandir
• Include file name in search_replace result display

Fixed

• Stale configurations from subagent switch
• ValueError on OTEL context detach in agent_span
• Clipboard toast preview replaced with fixed text
• Only agents with type "agent" are loadable with --agent flag
• Made chat_url nullable in ChatAssistantPublicData
• Normalized OTEL span exporter endpoint
• Removed redundant permission prompts for parallel tool calls needing the same permission
• Removed bottom margin issue in UI
• Never crash before ACP server starts
• Use skill in recent commands via the up-arrow navigation
• Fixed loading order issues in vibe initialization

Added

• /data-retention slash command to view Mistral AI's data retention notice and privacy settings

Added

• Alt+Left / Alt+Right keyboard shortcuts for word-wise cursor movement in chat input

Changed

• Refactored narrator into a dedicated narrator manager

Fixed

• Broken build on Linux
• Errored MCP servers are now excluded from the banner count
• Improved bash denylist matching and error messages
• Command messages are now skipped during rewind navigation

Added

• ACP message-id support for reliable message boundary identification
• Reasoning effort parameter for supported models

Changed

• Updated MistralAI SDK
• Updated ACP SDK dependency
• Refined system prompt wording and structure
• Reduced scroll sensitivity to 1 line per tick for smoother scrolling

Fixed

• Non-standard HTTP 529 status codes now handled gracefully in error formatting and retried
• Text selection errors when copying from unmounting components
• Excluded "injected" field from user messages in generic backend

Added

• Rewind mode to navigate and fork conversation history

Fixed

• Preserve message_id when aggregating streaming LLM chunks
• Improved error handling for SDK response errors

Changed

• Pinned agent-client-protocol dependency back to 0.8.1

Removed

• Context usage updates via ACP

Changed

• Loosened agent-client-protocol version constraint from pinned to minimum bound

Added

• OTEL tracing support for observability
• Skill tool for managing task lists and workflows
• Text-to-speech (TTS) functionality
• Standalone --resume command for session picker
• BFS for vibe folders to improve startup performance
• List-based model picker for /model command
• is_user_prompt flag to Mistral metadata header
• Correlation ID in user feedback calls
• Current date added to system prompt in vibe-work
• TypeScript type inference for large tool outputs in vibe-work-harness

Changed

• Updated agent-client-protocol to 0.9.0a1
• Changed inline code color from yellow to green
• Removed "You have no internet access" from CLI prompt
• Fine-grained permission system improvements
• Inject system certs into vibe-acp frozen binary via truststore

Fixed

• Streaming for currently streamed message when switching agents
• Proper UI updates when tools switch current agents
• Space key functionality when holding shift
• Empty TextChunk not appended when reasoning has no text content
• Messages removed from user feedback event
• Bash allowlist/denylist activation on Windows
• Improved scrolling performance
• ACP error handling in webview
• Context usage updates sent via ACP
• Include exit_plan_mode tool only in plan mode

Added

• Dedicated theorem proving agent powered by leanstral, setup with /leanstall
• More advanced AGENTS.md support:
  • AGENTS.md in ~/.vibe/ folder for user-level agent instructions
  • AGENTS.md for subfolders and in parent folders
• Mistral Code API key info displayed in CLI banner
• Voice mode with real-time transcription support
• Parallel tool execution for improved performance
• Structured ACP error classes for better error handling

Changed

• Bash allowlist/denylist now active on Windows
• Auto-completion relevance improved with better filename and path matching
• History navigation no longer filters by prefix
• Updated to Mistral SDK v2 import structure
• Removed find from bash default allowlist to prevent -exec abuse

Fixed

• Improved scrolling performance
• Web search tool now infers server URL from provider config

Added

• Session ID included in telemetry events for better tracing

Changed

• Skills now extract arguments when invoked, improving parameter handling
• Auto-compact threshold falls back to global setting when not defined at model level
• Update notification toast no longer times out, ensuring the user sees the restart prompt
• Removed file_content_before from Vibe Code, reducing payload size